CVE-2026-1669
2 advisories.
PyPI/keras CVE-2026-1669: high 7.1
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
Action: Upgrade keras to 3.12.1 or later.
pip install keras==3.13.2pip install keras==3.12.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.13.0 | 3.13.2 | - |
| 3.0.0 | 3.12.1 | - |
Fixed versions
| 3.13.2 | 3.12.1 |
Sources
- osv: GHSA-3m4q-jmj6-r34q
- https://github.com/keras-team/keras/security/advisories/GHSA-3m4q-jmj6-r34q
- https://nvd.nist.gov/vuln/detail/CVE-2026-1669
- https://github.com/keras-team/keras/pull/22057
- https://github.com/keras-team/keras/commit/8a37f9dadd8e23fa4ee3f537eeb6413e75d12553
- https://github.com/keras-team/keras
- https://github.com/keras-team/keras/releases/tag/v3.12.1
- https://github.com/keras-team/keras/releases/tag/v3.13.2
CVE-2026-1669 · published · modified · JSON
PyPI/keras CVE-2026-1669: high 7.1
Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading
Action: Upgrade keras to 3.12.1 or later.
pip install keras==3.12.1pip install keras==3.13.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.12.1 | - |
| 3.13.0 | 3.13.2 | - |
Fixed versions
| 3.12.1 | 3.13.2 |
Sources
- osv: PYSEC-2026-2546
- https://github.com/keras-team/keras/security/advisories/GHSA-3m4q-jmj6-r34q
- https://nvd.nist.gov/vuln/detail/CVE-2026-1669
- https://github.com/keras-team/keras/pull/22057
- https://github.com/keras-team/keras/commit/8a37f9dadd8e23fa4ee3f537eeb6413e75d12553
- https://github.com/keras-team/keras
- https://github.com/keras-team/keras/releases/tag/v3.12.1
- https://github.com/keras-team/keras/releases/tag/v3.13.2
- https://pypi.org/project/keras
- https://github.com/advisories/GHSA-3m4q-jmj6-r34q
CVE-2026-1669 · published · modified · JSON